home

zhuodashi.exe

卓大师刷机专家

北京耘升天下科技有限公司

Publisher:
OPDA Team  (signed by 北京耘升天下科技有限公司)

Product:
卓大师刷机专家

Description:
ZhuoDaShi

Version:
2.3.4.0

MD5:
d4d79974b0f883b85b4a5a15387c66fb

SHA-1:
2b4825c7de5847d72d6f315b7910a51741a2165e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:13:41 AM UTC  (today)

File size:
6.6 MB (6,948,960 bytes)

Product version:
129

Copyright:
Copyright©2011-2014

Trademarks:
正式版

Original file name:
zhuodashi.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\zhuodashi\zhuodashi.exe

Digital Signature
Signed by:
北京耘升天下科技有限公司

Authority:
Thawte, Inc.

Valid from:
1/15/2013 1:00:00 AM

Valid to:
3/17/2014 12:59:59 AM

Subject:
CN=北京耘升天下科技有限公司, OU=Software, O=北京耘升天下科技有限公司, L=Beijing, S=Beijing, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
31319ECFE88565C288BB66FDF72D8B13

File PE Metadata
Compilation timestamp:
4/2/2013 9:55:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:fq6xBJYt+tyU2BzRuTnqxB6wbRYbVsTMPDLLonxJOItU8:othU2BzoLyB6wNYJPcnxJO6

Entry address:
0x660FBE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 17, CF, 81, D3, 02, 1A, 55, 2D, 72, B8, 1B, A2, 25, 70, CA, D1, F1, 18, AF, 90, AD, 35, C4, 1D, 04, 1A, 75, 1C, 83, D8, 99, 1D, D8, A4, BF, 0B, 17, 03, 71, 77, E7, 79, FB, D4, B3, E8, 0E, 38, 01, 01, 01, 01, 10, 00, 00, 00, 11, 00, 00, 00, 12, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
6.4 MB (6,680,576 bytes)

Scan zhuodashi.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.